{"id":88992,"date":"2020-07-17T07:42:02","date_gmt":"2020-07-17T05:42:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami"},"modified":"2020-07-17T07:42:02","modified_gmt":"2020-07-17T05:42:02","slug":"wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","title":{"rendered":"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/c52b58a326ba424d73a93614818c82f5.png\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nN\u00eb t\u00eb kaluar\u00ebn <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/news\/t\/507776\/\">artikullin<\/a><\/noindex> ne treguam p\u00ebr <strong>Nemesida WAF Free<\/strong> \u2014 nj\u00eb mjet falas p\u00ebr mbrojtjen e faqeve dhe API-ve nga sulmet hacker, dhe n\u00eb k\u00ebt\u00eb rast vendos\u00ebm t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrmbledhje t\u00eb nj\u00eb skaneri t\u00eb njohur p\u00ebr dob\u00ebsi <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">Wapiti<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p>Skandimi i faqeve p\u00ebr dob\u00ebsi \u00ebsht\u00eb nj\u00eb mas\u00eb e nevojshme, e cila, n\u00eb kombinim me analiz\u00ebn e kodit burimor, lejon t\u00eb vler\u00ebsohet niveli i mbrojtjes s\u00eb saj nga k\u00ebrc\u00ebnimet e komprometimit. Skandimi i burimeve web mund t\u00eb b\u00ebhet me ndihm\u00ebn e pajisjeve t\u00eb specializuara.<\/p>\n<p><\/p>\n<p>Nikto, W3af (i shkruar n\u00eb Python 2.7, mb\u00ebshtetje e cila ka p\u00ebrfunduar) ose Arachni (nga shkurti nuk mb\u00ebshtetet m\u00eb) \u2014 zgjidhjet m\u00eb t\u00eb njohura t\u00eb disponueshme n\u00eb segmentin falas. Natyrisht, ekzistojn\u00eb edhe t\u00eb tjera, si Wapiti, t\u00eb cilin vendos\u00ebm ta ndalojm\u00eb.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3 id=\"wapiti-rabotaet-so-sleduyuschimi-tipami-uyazvimostey\">Wapiti punon me lloje t\u00eb ndryshme dob\u00ebsish:<\/h3>\n<p><\/p>\n<ul>\n<li>zb\u00ebrthimi i skedarit (lokale dhe t\u00eb larg\u00ebta, fopen, readfile);<\/li>\n<li>injeksione (PHP \/ JSP \/ ASP \/ SQL-injeksione dhe XPath-injeksione);<\/li>\n<li>XSS (injeksionin nd\u00ebrfaq\u00ebsor) (reflektuar dhe t\u00eb p\u00ebrhersh\u00ebm);<\/li>\n<li>zbulimi dhe ekzekutimi i komandave (eval (), system (), passthru ());<\/li>\n<li>injeksione CRLF (ndarja e p\u00ebrgjigjeve HTTP, fiksoja e seanc\u00ebs);<\/li>\n<li>XXE (inxhizimi i p\u00ebrmbajtjes s\u00eb jashtme XML);<\/li>\n<li>SSRF (falsifikimi i k\u00ebrkes\u00ebs n\u00eb an\u00ebn e sh\u00ebrbimit);<\/li>\n<li>p\u00ebrdorimi i skedar\u00ebve potencialisht t\u00eb rreziksh\u00ebm t\u00eb njohur (fal\u00eb baz\u00ebs s\u00eb t\u00eb dh\u00ebnave Nikto);<\/li>\n<li>konfigurime t\u00eb dob\u00ebta .htaccess q\u00eb mund t\u00eb anashkalohen;<\/li>\n<li>prania e skedar\u00ebve t\u00eb kopjave rezerv\u00eb q\u00eb zbulojn\u00eb informacion t\u00eb ndjesh\u00ebm (zbulesa e kodit burimor);<\/li>\n<li>Shellshock;<\/li>\n<li>redirigjime t\u00eb hapura;<\/li>\n<li>metoda t\u00eb pastra HTTP q\u00eb mund t\u00eb lejohet (PUT).<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"vozmozhnosti\">Karakteristikat:<\/h4>\n<p><\/p>\n<ul>\n<li>mb\u00ebshtetje p\u00ebr proxy HTTP, HTTPS dhe SOCKS5;<\/li>\n<li>autentifikimi me metoda t\u00eb ndryshme: Basic, Digest, Kerberos ose NTLM;<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb kufizuar fush\u00ebn e skanimit (domain, dosje, faqe, URL);<\/li>\n<li>zhbllokimi automatik i nj\u00ebrit prej parametrave n\u00eb URL;<\/li>\n<li>masat p\u00ebr shumic\u00ebn e rasteve ndaj cikleve t\u00eb pafund skanimi (shembull: ifor, kufizimi i vlerave p\u00ebr parametrin);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb vendosur nj\u00eb prioritet p\u00ebr shqyrtimin e URL-ve (edhe n\u00ebse nuk ndodhen n\u00eb fush\u00ebn e skanimit);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb p\u00ebrjashtuar disa URL nga skanimi dhe sulmet (p\u00ebr shembull: URL logout);<\/li>\n<li>importimi i skedar\u00ebve cookie (marrja e tyre me ndihm\u00ebn e instrumentit wapiti-getcookie);<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb aktivizuar \/ \u00e7aktivizuar verifikimin e certifikatave SSL;<\/li>\n<li>mund\u00ebsia p\u00ebr t\u00eb nxjerr\u00eb URL nga JavaScript (interpreter JS shum\u00eb i thjesht\u00eb);<\/li>\n<li>interaksioni me HTML5;<\/li>\n<li>disa mund\u00ebsi p\u00ebr t\u00eb menaxhuar sjelljen dhe kufizimet e crawler-it;<\/li>\n<li>vendosja e koh\u00ebs maksimale p\u00ebr procesin e skanimit;<\/li>\n<li>shtimi i disa titujve HTTP t\u00eb personalizuar ose konfigurimi i User-Agent-it t\u00eb p\u00ebrdoruesit.<\/li>\n<\/ul>\n<p><\/p>\n<h4 id=\"dopolnitelnye-vozmozhnosti\">Funcionalitete t\u00eb tjera:<\/h4>\n<p><\/p>\n<ul>\n<li>krijimi i raporteve t\u00eb cenueshm\u00ebris\u00eb n\u00eb formate t\u00eb ndryshme (HTML, XML, JSON, TXT);<\/li>\n<li>pejzazhim dhe rivendosje e skanimit ose sulmit (mekanizmi i sesionit duke p\u00ebrdorur bazat e t\u00eb dh\u00ebnave SQLite3);<\/li>\n<li>theksimi n\u00eb terminal p\u00ebr t\u00eb evidentuar cenueshm\u00ebrin\u00eb;<\/li>\n<li>nivela t\u00eb ndryshme t\u00eb regjistrimit;<\/li>\n<li>nj\u00eb m\u00ebnyr\u00eb e shpejt\u00eb dhe e leht\u00eb p\u00ebr t\u00eb aktivizuar \/ \u00e7aktivizuar modulet e sulmit.<\/li>\n<\/ul>\n<p><\/p>\n<h3 id=\"ustanovka\">Instalimi<\/h3>\n<p><\/p>\n<p>Versioni aktual i Wapiti mund t\u00eb instalohet n\u00eb 2 m\u00ebnyra:<\/p>\n<p><\/p>\n<ul>\n<li>duke shkarkuar burimin nga faqja <noindex><a rel=\"nofollow\" href=\"https:\/\/wapiti.sourceforge.io\/\">e internetit<\/a><\/noindex> dhe duke e ekzekutuar skriptin e instalimit, pasi t\u00eb keni instaluar Python3;<\/li>\n<li>n\u00ebp\u00ebrmjet komand\u00ebs pip3 install wapiti3.<\/li>\n<\/ul>\n<p><\/p>\n<p>Pas k\u00ebsaj, Wapiti do t\u00eb jet\u00eb gati p\u00ebr pun\u00eb.<\/p>\n<p><\/p>\n<h3 id=\"rabota-s-instrumentom\">Puna me mjetin<\/h3>\n<p><\/p>\n<p>P\u00ebr t\u00eb demonstruar funksionimin e Wapiti, do t\u00eb p\u00ebrdorim nj\u00eb platform\u00eb t\u00eb p\u00ebrgatitur n\u00eb m\u00ebnyr\u00eb speciale sites.vulns.pentestit.ru (burim i brendsh\u00ebm), q\u00eb p\u00ebrmban cenueshm\u00ebri t\u00eb ndryshme (Injection, XSS, LFI\/RFI) dhe mang\u00ebsi t\u00eb tjera t\u00eb aplikacioneve web. <\/p>\n<p><\/p>\n<p><strong>Informacioni \u00ebsht\u00eb ofruar vet\u00ebm p\u00ebr q\u00ebllime informuese. Mos e shkelni ligjin!<\/strong><\/p>\n<p><\/p>\n<p>Komanda baz\u00eb p\u00ebr t\u00eb nisur skanerin:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u &lt;target&gt; &lt;options&gt;<\/code><\/pre>\n<p><\/p>\n<p>Ka nj\u00eb ndihm\u00eb mjaft t\u00eb detajuar me nj\u00eb sasi t\u00eb madhe opsionesh p\u00ebr nisje, si p\u00ebr shembull:<\/p>\n<p><\/p>\n<p><strong>&#8212;scope<\/strong> \u2014 zona e aplikimit<br \/>\nN\u00ebse bashk\u00eb me URL-n\u00eb p\u00ebr skanim jepet parametri scope, mund t\u00eb rregullohet zona e skanimit t\u00eb faqes, duke treguar si nj\u00eb faqe t\u00eb ve\u00e7ant\u00eb, ashtu edhe t\u00eb gjitha faqet q\u00eb mund t\u00eb gjenden n\u00eb faqen e internetit.<\/p>\n<p><\/p>\n<p><strong>-s<\/strong> dhe <strong>-x<\/strong> \u2014 parametra p\u00ebr shtimin ose heqjen e URL-ve t\u00eb caktuara. K\u00ebta parametra jan\u00eb t\u00eb dobish\u00ebm kur \u00ebsht\u00eb e nevojshme t\u00eb shtoni ose hiqni nj\u00eb URL t\u00eb caktuar n\u00eb procesin e skanimit.<\/p>\n<p><\/p>\n<p><strong>&#8212;skip<\/strong> \u2014 parametri i specifikuar me k\u00ebt\u00eb \u00e7el\u00ebs do t\u00eb skanohet, por nuk do t\u00eb sulmohet. Kjo \u00ebsht\u00eb e dobishme n\u00ebse ka disa parametra t\u00eb rreziksh\u00ebm q\u00eb jan\u00eb m\u00eb mir\u00eb t\u00eb p\u00ebrjashtohen gjat\u00eb skanimit.<\/p>\n<p><\/p>\n<p><strong>&#8212;verify-ssl<\/strong> \u2014 aktivizimi ose p\u00ebrjashtimi i kontrollit t\u00eb certifikat\u00ebs.<br \/>\nSkeneri Wapiti \u00ebsht\u00eb modulor. Megjithat\u00eb, p\u00ebr t\u00eb aktivizuar module specifike nga ato q\u00eb lidhen automatikisht gjat\u00eb funksionimit t\u00eb skenerit, duhen p\u00ebrdorur \u00e7el\u00ebsi -m dhe t\u00eb renditen ato q\u00eb duhen me nj\u00eb presje. N\u00ebse \u00e7el\u00ebsi nuk p\u00ebrdoret, t\u00eb gjitha modulet do t\u00eb funksionojn\u00eb si t\u00eb paracaktuara. N\u00eb variantin m\u00eb t\u00eb thjesht\u00eb, kjo do t\u00eb duket si m\u00eb posht\u00eb:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti -u http:\/\/sites.vulns.pentestit.ru\/ -m sql,xss,xxe<\/code><\/pre>\n<p><\/p>\n<p>Ky shembull p\u00ebrdorimi tregon se ne do t\u00eb p\u00ebrdorim vet\u00ebm modulet SQL, XSS dhe XXE gjat\u00eb skanimit t\u00eb objektit. P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb e mundur t\u00eb filtroni funksionimin e moduleve n\u00eb var\u00ebsi t\u00eb metod\u00ebs s\u00eb nevojshme. P\u00ebr shembull, <strong>-m \u201cxss: get, blindsql: post, xxe: post\u201d<\/strong>. N\u00eb k\u00ebt\u00eb rast, moduli <strong>xss<\/strong> do t\u00eb aplikohet n\u00eb k\u00ebrkesat e d\u00ebrguara me metod\u00ebn GET, nd\u00ebrsa moduli <strong>blibdsql<\/strong> \u2014 n\u00eb k\u00ebrkesat POST etj. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ndonj\u00eb modul q\u00eb \u00ebsht\u00eb p\u00ebrfshir\u00eb n\u00eb list\u00eb nuk ka qen\u00eb i nevojsh\u00ebm gjat\u00eb skanimit ose punon shum\u00eb gjat\u00eb, duke shtypur kombinimin Ctrl+C mund t\u00eb kaloni p\u00ebrdorimin e modulit aktual, duke zgjedhur p\u00ebrkat\u00ebsisht n\u00eb menyn\u00eb interaktive.<\/p>\n<p><\/p>\n<p>Wapiti mb\u00ebshtet d\u00ebrgimin e k\u00ebrkesave p\u00ebrmes nj\u00eb serveri proxy me ndihm\u00ebn e \u00e7el\u00ebsit <strong>-p<\/strong> dhe autentikimin n\u00eb faqen e synuar p\u00ebrmes parametrave <strong>-a<\/strong>. Gjithashtu, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrcaktoni llojin e autentikimit: <strong>Basic<\/strong>, <strong>Digest<\/strong>, <strong>Kerberos<\/strong> dhe <strong>NTLM<\/strong>. P\u00ebr dy t\u00eb fundit mund t\u00eb k\u00ebrkohet instalimi i moduleve shtes\u00eb. Gjithashtu, mund t\u00eb p\u00ebrfshihen n\u00eb k\u00ebrkesa \u00e7do lloj titulli (p\u00ebrfshir\u00eb t\u00eb rast\u00ebsish\u00ebm <strong>User-Agent<\/strong>) dhe shum\u00eb m\u00eb tep\u00ebr.<\/p>\n<p><\/p>\n<p>P\u00ebr t\u00eb p\u00ebrdorur autentifikimin, mund t\u00eb p\u00ebrdorim mjetin <strong>wapiti-getcookie<\/strong>. Me ndihm\u00ebn e tij formojm\u00eb <strong>cookie<\/strong>, t\u00eb cilat Wapiti do t\u00eb p\u00ebrdor\u00eb gjat\u00eb skanimit. Formimi <strong>cookie<\/strong> kryhet me komand\u00ebn:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie -u http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json<\/code><\/pre>\n<p><\/p>\n<p>Gjat\u00eb pun\u00ebs n\u00eb m\u00ebnyr\u00eb interaktive, p\u00ebrgjigjemi n\u00eb pyetje dhe tregojm\u00eb informacionin e nevojsh\u00ebm si: emri i p\u00ebrdoruesit, fjal\u00ebkalimi dhe t\u00eb tjer\u00eb:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/1f858db74cd11b0837d0aeca890af816.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb dalje marrim nj\u00eb sked\u00eb n\u00eb formatin JSON. Nj\u00eb opsion tjet\u00ebr \u00ebsht\u00eb t\u00eb shtojm\u00eb gjith\u00eb informacionin e nevojsh\u00ebm p\u00ebrmes parametrave <strong>-d<\/strong>:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti-getcookie - http:\/\/sites.vulns.pentestit.ru\/login.php -c cookie.json -d &quot;username=admin&amp;password=admin&amp;enter=submit&quot;<\/code><\/pre>\n<p><\/p>\n<p>Rezultati do t\u00eb jet\u00eb i ngjash\u00ebm:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/87e0923c3027bdda5f1ccf0d4e08a10f.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Duke shqyrtuar funksionalitetin kryesor t\u00eb skanerit, k\u00ebrkesa p\u00ebrfundimtare p\u00ebr testimin e aplikacionit web n\u00eb rastin ton\u00eb ishte:<\/p>\n<p><\/p>\n<pre><code class=\"bash\"># wapiti --level 1 -u http:\/\/sites.vulns.pentestit.ru\/ -f html -o \/tmp\/vulns.html -m all --color -\u0441 cookie.json --scope folder --flush-session -A 'Pentestit Scans' -p http:\/\/proxy.office.pentestit.ru:3128<\/code><\/pre>\n<p><\/p>\n<p>ku midis parametrave t\u00eb tjer\u00eb:<\/p>\n<p><\/p>\n<p><strong>-f<\/strong> dhe <strong>-o<\/strong> - forma dhe rruga p\u00ebr ruajtjen e raportit;<\/p>\n<p><\/p>\n<p><strong>-m<\/strong> - lidhja e t\u00eb gjitha moduleve - nuk rekomandohet, pasi do t\u00eb ndikoj\u00eb n\u00eb koh\u00ebn e testimit dhe madh\u00ebsin\u00eb e raportit;<\/p>\n<p><\/p>\n<p><strong>&#8212;color<\/strong> - thekson gjetjet e dob\u00ebsive n\u00eb var\u00ebsi t\u00eb kritikalitetit sipas versionit t\u00eb vet Wapiti;<\/p>\n<p><\/p>\n<p><strong>-c<\/strong> - p\u00ebrdorimi i sked\u00ebs me <strong>cookie<\/strong>, i gjeneruar me ndihm\u00ebn e <strong>wapiti-getcookie<\/strong>; <\/p>\n<p><\/p>\n<p><strong>&#8212;scope<\/strong> \u2014 zgjedhja e objektivit p\u00ebr sulm. Duke zgjedhur opsionin <strong>folder<\/strong> do t\u00eb skanohet dhe do t\u00eb sulmohet \u00e7do URL, duke filluar nga baza. URL-ja e baz\u00ebs duhet t\u00eb ket\u00eb nj\u00eb shenj\u00eb \/ (pa emrin e skedarit);<\/p>\n<p><\/p>\n<p><strong>&#8212;flush-session<\/strong> \u2014 lejon kryerjen e nj\u00eb rishikimi, i cili nuk merr parasysh rezultatet e m\u00ebparshme;<\/p>\n<p><\/p>\n<p><strong>-A<\/strong> \u2014 e vetme <strong>User-Agent<\/strong>;<\/p>\n<p><\/p>\n<p><strong>-p<\/strong> \u2014 adresa e serverit proxy, n\u00ebse \u00ebsht\u00eb e nevojshme.<\/p>\n<p><\/p>\n<h3 id=\"nemnogo-ob-otchete\">Pak mbi raportin<\/h3>\n<p><\/p>\n<p>Rezultati i skanimit paraqitet n\u00eb form\u00ebn e nj\u00eb raporti t\u00eb detajuar p\u00ebr t\u00eb gjitha vulnerabilitetet e gjetura n\u00eb formatin e nj\u00eb faqe HTML, n\u00eb nj\u00eb m\u00ebnyr\u00eb t\u00eb kuptueshme dhe t\u00eb leht\u00eb p\u00ebr tu perceptuar. N\u00eb raport do t\u00eb p\u00ebrmenden kategorit\u00eb dhe numri i vulnerabiliteteve t\u00eb gjetura, p\u00ebrshkrimi i tyre, k\u00ebrkesat, komandat p\u00ebr <strong>curl<\/strong> dhe k\u00ebshillat mbi se si t'i mbyllni ato. P\u00ebr leht\u00ebsi navigimi, n\u00eb titujt e kategorive do t\u00eb shtohet nj\u00eb lidhje, duke klikuar mbi t\u00eb mund t\u00eb kaloni tek ajo:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/39d35304b6f2ea20fd9096e167daabd5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nj\u00eb disavantazh thelb\u00ebsor i raportit \u00ebsht\u00eb mungesa e nj\u00eb harta t\u00eb till\u00eb t\u00eb aplikacionit web, pa t\u00eb cil\u00ebn nuk do t\u00eb kuptohet n\u00ebse adresa dhe parametrat jan\u00eb analizuar. Ka gjithashtu mund\u00ebsin\u00eb e alarmeve false. N\u00eb rastin ton\u00eb, raporti p\u00ebrfshin \"skedar\u00ebt e kopjimeve rezerv\u00eb\" dhe \"skedar\u00ebt potencialisht t\u00eb rreziksh\u00ebm\". Numri i tyre nuk p\u00ebrputhet me realitetin, pasi nuk kishte skedare t\u00eb tilla n\u00eb server.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/09c6f8945e6fb6dc6de1388f71fc96bb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Mund\u00ebsisht, modulet q\u00eb funksionojn\u00eb n\u00eb m\u00ebnyr\u00eb jo korrekt mund t\u00eb rregullohen me kalimin e koh\u00ebs. Nj\u00eb tjet\u00ebr disavantazh i raportit \u00ebsht\u00eb mungesa e ngjyr\u00ebs p\u00ebr vulnerabilitetet e gjetura (n\u00eb var\u00ebsi t\u00eb kriticitetit t\u00eb tyre), ose t\u00eb pakt\u00ebn ndarjen e tyre sipas kategorive. E vetmja m\u00ebnyr\u00eb p\u00ebr t\u00eb kuptuar indirekt kriticitetin e nj\u00eb vulnerabiliteti t\u00eb gjetur \u00ebsht\u00eb t\u00eb aplikojm\u00eb parametrin <strong>&#8212;color<\/strong> gjat\u00eb skanimit dhe at\u00ebher\u00eb vulnerabilitetet e gjetura do t\u00eb ngjyrosen n\u00eb ngjyra t\u00eb ndryshme:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/46f4c34f9215117eeddd96db633e9e3e.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Por n\u00eb raportin e vet, nj\u00eb ngjyrosje e till\u00eb nuk parashikohet.<\/p>\n<p><\/p>\n<h3 id=\"uyazvimosti\">Dob\u00ebsit\u00eb<\/h3>\n<p><\/p>\n<h4 id=\"sqli\">SQLi<\/h4>\n<p><\/p>\n<p>Skeneri arriti pjes\u00ebrisht t\u00eb gjej\u00eb SQLi. Kur k\u00ebrkohet p\u00ebr vulnerabilitete SQL n\u00eb faqe ku nuk \u00ebsht\u00eb e nevojshme autentifikimi, nuk ka ndonj\u00eb problem:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/f9ffef805a115c1a7d47c068a38794bf.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Nuk arrit\u00ebm t\u00eb gjejm\u00eb ndonj\u00eb dob\u00ebsi n\u00eb faqet e aksesueshme vet\u00ebm pas autentifikimit, madje edhe duke p\u00ebrdorur t\u00eb dh\u00ebna valide, <strong>cookie<\/strong>, pasi p\u00ebr shkak se me probabilitet t\u00eb lart\u00eb pas autentifikimit t\u00eb suksessh\u00ebm do t\u00eb ndodh\u00eb &quot;dalja nga sesioni&quot; dhe <strong>cookie<\/strong> do t\u00eb b\u00ebhen t\u00eb pavlefshme. Sikur funksioni i deautorizimit t\u00eb ishte realizuar si nj\u00eb skenar i ve\u00e7ant\u00eb, i cili merret me k\u00ebt\u00eb procedur\u00eb, do t\u00eb mund t\u00eb p\u00ebrjashtohej plot\u00ebsisht p\u00ebrmes parametrin -x, duke parandaluar k\u00ebshtu funksionimin e tij. N\u00eb t\u00eb kund\u00ebrt, nuk \u00ebsht\u00eb e mundur t\u00eb p\u00ebrjashtohet p\u00ebrpunimi i tij. Kjo \u00ebsht\u00eb nj\u00eb problem jo specifik p\u00ebr nj\u00eb modul t\u00eb caktuar, por p\u00ebr mjetin n\u00eb t\u00ebr\u00ebsi, por p\u00ebr shkak t\u00eb k\u00ebtij nuanc\u00ebs nuk arrit\u00ebm t\u00eb zbulojm\u00eb disa injeksione n\u00eb zona t\u00eb mbyllura t\u00eb burimit.<\/p>\n<p><\/p>\n<h4 id=\"xss\">XSS<\/h4>\n<p><\/p>\n<p>Skeneri e ka p\u00ebrfunduar detyr\u00ebn me sukses dhe ka gjetur t\u00eb gjitha dob\u00ebsit\u00eb e p\u00ebrgatitura:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/ae43bf1f7d78224a5df5f2ef733f8203.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<h4 id=\"lfirfi\">LFI\/RFI<\/h4>\n<p><\/p>\n<p>Skeneri gjeti t\u00eb gjitha dob\u00ebsit\u00eb e implantuar:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Wapiti \u2014 kontrolli e-kodu p\u00ebr dob\u00ebsi me forcat tuaja\" src=\"\/wp-content\/uploads\/2020\/07\/9056c7911237b607a6b12cc2e5a488d3.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>N\u00eb p\u00ebrgjith\u00ebsi, megjith\u00eb njoftimet e rreme dhe leht\u00ebsirat n\u00eb zbulimin e dob\u00ebsive, Wapiti, si nj\u00eb mjet falas, tregon rezultate t\u00eb k\u00ebnaqshme. \u00c7do m\u00ebnyr\u00eb, \u00ebsht\u00eb e pranuar se skeneri \u00ebsht\u00eb mjaft i fuqish\u00ebm, fleksib\u00ebl dhe shum\u00ebfunksional, dhe m\u00eb e r\u00ebnd\u00ebsishmja \u2014 falas, prandaj ka t\u00eb drejt\u00eb t\u00eb p\u00ebrdoret, duke ndihmuar administrator\u00ebt dhe zhvilluesit t\u00eb marrin informacionin baz\u00eb mbi gjendjen e siguris\u00eb s\u00eb aplikacionit web.<\/p>\n<p><\/p>\n<p>Q\u00ebndroni t\u00eb sh\u00ebndetsh\u00ebm dhe t\u00eb mbrojtur!<\/p>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/510998\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":88993,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-88992","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-07-17T05:42:02+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wapiti \u2014 kontrolli i dob\u00ebsive t\u00eb faqes me forcat tuaja | ProHoster","description":"N\u00eb artikujn e kaluar, fol\u00ebm p\u00ebr Nemesida WAF Free \u2014 nj\u00eb mjet falas p\u00ebr mbrojtjen e faqeve dhe API-ve nga sulmet e haker\u00ebve, dhe n\u00eb k\u00ebt\u00eb vendos\u00ebm t\u00eb b\u00ebjm\u00eb nj\u00eb p\u00ebrshkrim t\u00eb skanuesit t\u00eb njohur t\u00eb dob\u00ebsive Wapiti. Skanimi i nj\u00eb faqeje p\u00ebr dob\u00ebsi \u00ebsht\u00eb nj\u00eb mas\u00eb e nevojshme, e cila, s\u00eb bashku me analizimin e kodit burimor, lejon t\u00eb vler\u00ebsohet niveli i mbrojtjes s\u00eb saj nga k\u00ebrc\u00ebnimet e komprometimit. Skanimi i burimeve web mund t\u00eb realizohet","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Wapiti \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0432\u043e\u0438\u043c\u0438 \u0441\u0438\u043b\u0430\u043c\u0438 | ProHoster","og:description":"\u0412 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e Nemesida WAF Free \u2014 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 API \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, \u0430 \u0432 \u044d\u0442\u043e\u0439 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043e\u0431\u0437\u043e\u0440 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Wapiti. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0430\u0439\u0442\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u043c\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u043a\u0443\u043f\u0435 \u0441 \u0430\u043d\u0430\u043b\u0438\u0437\u043e\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0435\u0433\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u043e\u0442 \u0443\u0433\u0440\u043e\u0437 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438. \u0412\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u043c\u043e\u0436\u043d\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/wapiti-proverka-sajta-na-uyazvimosti-svoimi-silami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-17T05:42:02+00:00","article:modified_time":"2020-07-17T05:42:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"88992","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:45:41","updated":"2022-09-28 15:58:49"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/88992","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=88992"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/88992\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/88993"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=88992"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=88992"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=88992"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}